Verqano LLC is deeply committed to protecting the privacy and security of your personal data. While our operations are based in the United States, we recognize and adhere to the principles of the General Data Protection Regulation (GDPR) for individuals residing in the European Economic Area (EEA) and the UK. This statement outlines our commitment to GDPR compliance.

Data Controller Verqano LLC, located at 157 Fillmore St,, San Francisco, CA 94117, United States, acts as the data controller for the personal data collected when you interact with our website, https://verqano.com/. This means we determine the purposes and means of processing your personal data.

Personal Data We Collect We collect personal data primarily to fulfill your orders and improve your shopping experience. This typically includes:

  • Identity Data: Your first name, last name.
  • Contact Data: Your billing address, shipping address, email address, and telephone numbers.
  • Transaction Data: Details about payments to and from you, and other details of products you have purchased from us.
  • Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
  • Usage Data: Information about how you use our website, products, and services.

For a comprehensive list of data collected and how it is used, please refer to our full Privacy Policy.

Lawful Basis for Processing Your Data We will only process your personal data where we have a lawful basis to do so under GDPR. The primary lawful bases we rely on include:

  • Performance of a Contract: Processing is necessary for the performance of a contract to which you are a party (e.g., when you purchase products from us, we need your address for shipping).
  • Legitimate Interests: Processing is necessary for our legitimate interests (or those of a third party), provided your interests and fundamental rights do not override those interests (e.g., improving our website, preventing fraud, customer service).
  • Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., signing up for marketing emails). You have the right to withdraw consent at any time.
  • Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.

Your Data Protection Rights Under GDPR If you are an individual located in the EEA or UK, you have specific rights regarding your personal data:

  • Right to Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You have the right to request that we correct any inaccurate or incomplete data we hold about you.
  • Right to Erasure (‘Right to be Forgotten’): You have the right to request that we delete your personal data under certain circumstances.
  • Right to Restrict Processing: You have the right to request that we limit the way we use your personal data under certain circumstances.
  • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
  • Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.

Exercising Your Rights To exercise any of these rights, or if you have any questions about this GDPR Compliance Statement or our data practices, please contact us:

We will respond to legitimate requests within one month.

Data Security We have implemented appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed. We also limit access to your personal data to employees, agents, contractors, and other third parties who have a business need to know.

Data Retention We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Third-Party Processors We work with trusted third-party service providers (e.g., payment processors, analytics providers) to operate our business and provide services to you. We ensure that these third parties also meet high standards of data protection and only process your data on our instructions and in compliance with GDPR.

Updates to This Statement We may update this GDPR Compliance Statement periodically to reflect changes in our practices or legal requirements. We encourage you to review it regularly. For the most detailed information on our privacy practices, please always refer to our full Privacy Policy available on https://verqano.com/.